Legal

Privacy policy

This translation is provided for information only. The German version is legally binding.

Last updated: October 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is signundsinn GmbH, named above. No data protection officer has been appointed, as the legal requirements for this are not met. If you have any questions about data protection, please use the contact details above.

2. Overview: what this website does and does not do

3. Hosting and server log files

When you visit this website, the web server automatically stores information transmitted by your browser in so-called server log files. This is:

• IP address of the requesting device
• Date and time of access
• Page or file accessed and amount of data transferred
• Referrer URL (previously visited page)
• Browser type and version, operating system

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free provision, security and stability of the website. This data is not combined with other data sources. The log files are deleted after 30 days at the latest, unless security-related incidents require longer retention.

The website is hosted by the following provider: Timme Hosting GmbH & Co. KG, Marie-Curie-Straße 5, 21337 Lüneburg, Germany. The server is located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. Contact form

On the homepage, you can send us a demo request or a question via a contact form. In doing so, we process the details you enter: name, email address and, optionally, company, phone number, shop or website URL and the system used, the selected topic and your message. We also store the time of the enquiry and the IP address in order to detect and prevent misuse (spam, automated requests).

Your details are processed in two ways:

• By email to our team (kontakt@signundsinn.de), so that we can reply to your enquiry.
• In our customer relationship management system (CRM), which signundsinn GmbH operates itself. There, we create your enquiry as a case with contact and company, so that follow-up questions, demo appointments and quotes can be handled in a traceable manner. The CRM is not a third-party service.

The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request). We base spam prevention on Art. 6(1)(f) GDPR (legitimate interest in a functioning form). For spam prevention, the form uses a hidden control field, a timing check and a limit on requests per IP address; for this purpose, the IP address is kept on the web server exclusively in hashed form for no more than one hour. No external captcha service is used.

Providing your name, email address and message is required; all other details are voluntary. We delete the data as soon as your enquiry has been fully dealt with and no contractual relationship is established, but no later than after 12 months, unless statutory retention obligations prevent this.

5. Contacting us by email or phone

If you contact us by email (e.g. at sales@eywora.com) or by phone, for example to arrange a live demo, we process the data you provide (name, email address, phone number, company, content of your enquiry) to handle your enquiry and in case of follow-up questions.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry is aimed at concluding a contract or serves to carry out pre-contractual measures; otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

The data is deleted as soon as it is no longer required to achieve the purpose and no statutory retention obligations (in particular under the HGB and AO) prevent this.

6. Live demo and pre-contractual steps

To carry out an agreed live demo, we process the contact details of the participants and information about your shop or website system, insofar as you provide this to us for preparation. The demo takes place as a video conference or on site. We will inform you about the video conferencing tool used when arranging the appointment. The legal basis is Art. 6(1)(b) GDPR.

Appointment booking via Google Calendar. When you click a link to book an appointment, a window opens in which we embed the booking page of Google Calendar. Only this establishes a connection to Google servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In particular, your IP address and browser details are transmitted, and Google may set cookies. Google processes what you enter when booking (e.g. name, email address, chosen time) on our behalf; we receive it as an appointment in our calendar. A transfer to Google LLC in the USA cannot be ruled out; it relies on the adequacy decision on the EU-US Data Privacy Framework, which Google participates in. The legal basis is Art. 6(1)(b) GDPR (arranging an appointment at your request) and Section 25(2) no. 2 TDDDG. If you do not want this, write to us at sales@eywora.com or call us. Further information is available in Google’s privacy policy.

7. External links

This website contains links to external websites (e.g. signundsinn.de, eywora.com, the EU ODR platform). When you click on them, you leave our website. The privacy policies of the respective operators apply to data processing on the linked sites. Merely viewing our site does not transmit any data to these providers.

8. Recipients and transfers to third countries

Your data is only passed on to third parties insofar as this is necessary for the performance of the contract (e.g. hosting provider as processor), you have given your consent or there is a legal obligation. No transfer to third countries outside the EU or EEA takes place in connection with this website, except for the possible transfer to Google when booking an appointment (see section 6).

9. Your rights as a data subject

You have the following rights with respect to us regarding the personal data concerning you:

• Access (Art. 15 GDPR) to the data we process
• Rectification (Art. 16 GDPR) of inaccurate or incomplete data
• Erasure (Art. 17 GDPR), unless retention obligations prevent this
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR) to processing based on Art. 6(1)(f) GDPR

To exercise your rights, an informal message to kontakt@signundsinn.de is sufficient.

Right to object

Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

10. Data security

This website is delivered over a TLS-encrypted connection (HTTPS). We use technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

11. Audience measurement with Matomo

With your consent, we use the open-source software Matomo on this website to understand how the website is used and to improve it. We operate Matomo ourselves (server of signundsinn GmbH at m.signundsinn.de, hosted by Timme Hosting GmbH & Co. KG in its data centre in Falkenstein, Germany, with which a data processing agreement exists). No data is passed on to the manufacturer of Matomo or to other third parties.

Without your consent, no measurement takes place. We ask you on your first visit. Until you have agreed, no data is transmitted to Matomo and no Matomo cookies are set. We store your decision (consent or refusal) for 12 months in the cookie aicrew_consent_stats (valid for this website only). It contains your choice (yes/no), a random consent ID and the version of this description, but no other personal data. The cookie is technically necessary so that we can respect your choice (Section 25(2) no. 2 TDDDG). If the description of the audience measurement changes materially, we ask again. Every Eywora website asks you separately: a decision made on eywora.com does not apply here, and your decision here does not apply there. If you refuse, we delete any Matomo cookie that is still present.

Which data is processed?

• pages viewed, time of the visit and time spent
• the previously visited page (referrer) and campaign parameters in links, e.g. if you come to us from another Eywora website
• clicks on external links, the successful submission of the contact form and the opening of the appointment booking (only as events, without what you entered)
• mouse clicks, mouse movements and scroll depth on individual pages, which we evaluate in aggregate as heatmaps (text entered in form fields is not recorded)
• browser, operating system, device type, screen resolution and language
• the IP address: it is processed in full only briefly to determine the rough location (country/region) and is shortened by 1 byte before storage; the full IP address is not stored
• a randomly generated visitor ID

Cookies and recognition across websites. After your consent, Matomo sets two cookies: _pk_id (visitor ID, lifetime up to 13 months) and _pk_ses (session, 30 minutes). The cookies apply to all subdomains of eywora.com (e.g. aicrew.eywora.com and www.eywora.com); we evaluate these websites together in one Matomo installation. This information does not apply to cip.eywora.com. If you visit several of these websites, we therefore recognise you as the same visitor by your visitor ID, even if you do not click a link between the websites. This lets us see which of our pages contributed to an enquiry or trial registration, without identifying you by name. We do not combine this data with the contact details from the contact form.

Cookie for the withdrawal. Because the visitor ID is shared by all of these websites while your consent applies per website, we additionally store in the cookie eywora_tracking_hosts (valid for eywora.com and all subdomains, 12 months) for which of these websites your consent currently exists. It contains only those host names and an expiry date for each — no identifier, no choice and no other personal data. We need it so that we can delete the shared visitor ID as soon as no consent exists for any of these websites, and so that a withdrawal here does not end the measurement on another website for which you have given consent. The cookie is technically necessary for this purpose (Section 25(2) no. 2 TDDDG).

Heatmaps. With your consent, we use the heatmap function of Matomo. It shows us where on individual pages people click frequently, how far they scroll and where the mouse moves, so that we can improve content and navigation. For this, your browser records clicks, mouse movements, scroll depth, window size and the page viewed and transmits them to our Matomo server. The data is only displayed in aggregate as a heatmap; we do not see individual visits. Entries in form fields (e.g. in the contact form) and keyboard input are not recorded. The raw data from which the heatmaps are built is deleted after 390 days, like the other raw data; the finished, aggregated heatmaps contain no personal reference and are kept. The same consent, the same legal basis and the same withdrawal apply as for the rest of the audience measurement.

Recordings of individual sessions (session recordings). With your consent, we occasionally record individual sessions, limited in time or number and only on selected pages, to find usability problems. Mouse movements, clicks, scrolling and the displayed page content are recorded. Entries in form fields and keyboard input are not recorded. The recordings are deleted after 390 days. The same consent, the same legal basis and the same withdrawal apply as for the rest of the audience measurement.

Legal basis. Processing takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Consent is voluntary; the website can be used in full without it.

Withdrawal. You can withdraw or grant your consent again at any time with effect for the future: click Cookie settings (also in the footer of every page) and choose “Decline”. This deletes the Matomo cookies of this website. The page is then reloaded. We delete the shared visitor ID (_pk_id) as soon as no consent exists for any Eywora website — if you withdraw here while you have given consent on eywora.com, it remains in place for that website; if you later withdraw there as well, it is deleted. The lawfulness of processing carried out before the withdrawal remains unaffected. The decision applies only to the audience measurement on this website; on eywora.com you decide separately there, as you do about the marketing services (Tag Manager, Meta pixel), which do not exist on this website. This information does not apply to cip.eywora.com.

Proof of consent. To be able to prove your consent (Art. 7(1) GDPR), we report every decision (consent, refusal or withdrawal) to eywora.com and store it there: consent ID, your choice, time, version of the description, website (host) and language. Your IP address and user agent are not stored. The entries are deleted after 3 years. The banner on eywora.com shows your consent ID under “Settings”; on request we use it to retrieve the entries. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.

Retention. Individual visits (raw data) are deleted after 390 days (about 13 months). After that, only aggregated statistics without personal reference remain.

Browser signals (Do Not Track, Global Privacy Control). We use audience measurement exclusively on the basis of your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Until you expressly agree in the consent dialog, it is not loaded – regardless of whether your browser sends a “Do Not Track” or “Global Privacy Control” signal. Processing for tracking purposes on the basis of legitimate interests does not take place.

Because these signals are often set across the board in browser settings, we show you the consent dialog even if such a signal is sent. If you expressly give your consent there, we assume that it is your more specific decision for our website. You can withdraw your consent at any time with effect for the future via Cookie settings.

12. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The version current at the time of your next visit will then apply.